{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fb39863e-6340-5deb-ae7e-a53d210203ae",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-handler-ssl-ocsp",
      "version": "4.1.130.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:170c1233-8bbf-55d3-97cf-1b9d15a3df03",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36abe2bc-ca0a-5fca-904d-5140150a887e",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cc1f88c-046f-5f19-bdf9-b880a1038ae1",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5574574f-867e-55ac-ad36-dcc86661b724",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0fc99cf-b1b7-58dd-b0f5-dcfaf1e471d8",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edb8ce0b-e9b8-5d6d-a4b9-df046aba14d3",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:164d2ec9-0464-57df-a66c-e7cf81dee745",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5570de9-dc0f-508b-97fa-1c5691c45352",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:964ca3df-1785-5fcd-a6bb-fcf2f598ba37",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a7c5ddc-74d8-5bb0-b1c3-63200dc2dd11",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fda1a8c0-f6c0-553f-82f8-38d9157a4136",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:588a61aa-1019-50b4-8204-04bb3b6529a1",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2496708-29bb-5091-97a9-4f48d92faaef",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2709c6a4-be1d-59c5-8cc7-ab0fc1582883",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d786adee-0ef5-5210-b1d6-d9fc9d5895d5",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:498c5977-a42f-5581-8641-03811e90928c",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc4d655c-471f-5a2e-88a7-643990529355",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0a0e84f-a4b3-51c8-82f8-cfa7b91345e9",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3caaf359-0f54-5522-998d-59c32c7c4dfe",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:657b75ab-0a65-5f07-ac4e-69a07c457d9c",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caa2e83c-932e-5803-9940-a8e90c32d220",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c12e6237-3df5-50df-8b53-4dd141fc242d",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7a44c8c-68d2-5828-8d3b-6b2d703312e4",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e91f0f0-cec4-5f5a-9901-bb3fb2c18757",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e544cb83-c9cb-529d-93e1-7b25d37aa6e1",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23119d27-5340-5d7b-ab4b-35c19f662a5d",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71d107b3-ab5c-55b8-8a8b-2ea9894304aa",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22c52982-449f-539c-8513-c92fb2e09f31",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28f8cba1-49a0-53c3-af80-281c42d8e953",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:382459d5-9ec5-587c-aee6-92d9b36b7587",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb62a396-a681-5955-ab62-641a93a8f324",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:497c1096-efe0-5faa-a937-34700fe87c18",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03eec651-5305-5f9c-8d8d-9b50f396b313",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29bddfb1-0160-5b00-9358-413fa6c36bac",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91a1a335-b3ad-5519-b229-6f2ac95842a5",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d6025ce-bcef-5617-84ef-f9fc8e68072a",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c13e15f-f759-54d3-a05a-7572a82b3a08",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfec4557-995b-5d43-a17b-62f7f9fb2466",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c76dbae3-ee4c-5204-bb7e-e240db3a4b9d",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2595cafb-9d88-5757-bb88-138f6b9724ef",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6159948-a29c-5804-b39a-00bfb96adf85",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:247136a4-34e5-5d77-a17f-1172a2551df1",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc2a6591-ace9-5c14-8e8b-18576a4024a6",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:183c6467-4645-5bd3-ad77-282a2d3fa0ab",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ed0f3d4-b996-5c68-a306-712a0256c2d5",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f361cfe-bdbb-5e78-b283-5a8d6960a331",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8907b99e-0314-5353-b3c2-6d1f9a50d5aa",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8db2a5c-0484-5519-a35d-b167e5fac1d9",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd9670cc-e34d-59f3-8549-0ce60d70a90c",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bacfc13c-e80f-516f-9caa-0377c6b650b8",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d00fa722-7ec6-53db-8244-b039baf359e4",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73172a71-4cc3-528c-9be6-dbfbfa7b4495",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8321d55d-13c1-56d7-b1ad-e5a04bac8f00",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ca17d15-c8b2-57d0-b238-de7851f67598",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:393191fd-3643-5e75-8665-41d0f013243d",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50f91bad-545a-591a-bdb3-2fe203f449c4",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19675a37-de9d-51dd-9347-f1f543f1426a",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.4"
    }
  ]
}